This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/zXLnfUczUBBQtu-uo6mCxhK1HNI.roa File: zXLnfUczUBBQtu-uo6mCxhK1HNI.roa (raw, json) Hash identifier: 5SgEpDYdRUOD9p+rClAHWfynMXe8ZAzFE3cf1BLha3s= Subject key identifier: CD:72:E7:7D:47:33:50:10:50:B6:EF:AE:A3:A9:82:C6:12:B5:1C:D2 Certificate issuer: /CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b Certificate serial: 019B7834C03E40C576E89F95FDAA63A85258 Authority key identifier: B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/zXLnfUczUBBQtu-uo6mCxhK1HNI.roa Signing time: Thu 01 Jan 2026 06:18:01 +0000 ROA not before: Thu 01 Jan 2026 06:18:01 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 209459 IP address blocks: 45.82.136.0/22 maxlen: 24 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.mft rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 26 Jan 2026 22:00:30 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:78:34:c0:3e:40:c5:76:e8:9f:95:fd:aa:63:a8:52:58 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=b7785a30d8512d0d8ab637812b79fa4529a1ef1b Validity Not Before: Jan 1 06:18:01 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=cd72e77d4733501050b6efaea3a982c612b51cd2 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d8:5a:f5:3b:38:71:e2:7d:71:02:8e:a7:6f:3d: 79:72:0a:e6:16:5f:5a:5f:d7:18:b5:89:81:f3:73: 74:aa:b7:a9:e1:98:78:c0:77:ef:f3:47:26:52:27: f7:31:66:3d:c7:5f:f9:75:89:c9:fc:76:54:c8:eb: 8d:e8:96:08:cf:b9:1a:ae:55:73:68:ff:b2:e3:8b: 6d:2d:7b:8a:e8:aa:e3:29:ba:b6:a4:d5:57:91:21: 0f:2c:76:0d:e1:22:4b:cf:cb:19:ac:7f:df:bb:50: 9b:90:e6:9b:68:2b:5f:ab:73:7a:7e:b4:49:a6:27: 95:13:a3:7c:33:30:aa:ec:ec:02:70:e0:a8:ee:50: 19:12:ad:c0:66:0e:d9:87:ab:d0:58:eb:51:04:82: 14:1c:9f:6a:30:6e:9d:49:0d:0c:c9:97:e0:ce:fc: c2:18:36:37:c4:f2:7b:e3:6d:bc:0a:cf:ea:0c:63: 13:fa:f6:37:9a:e4:f9:a4:d7:b6:fe:2f:39:93:b5: e7:eb:e2:7b:37:90:ba:0e:ff:25:fe:5c:c3:f8:8e: 45:d7:77:b0:5a:6d:17:54:95:c3:f3:d9:d6:f5:a5: 3f:ef:11:ba:a7:b5:05:17:93:60:57:04:00:43:d5: fe:98:a1:13:cc:68:f0:8f:8c:ed:cc:28:b3:36:af: ae:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: CD:72:E7:7D:47:33:50:10:50:B6:EF:AE:A3:A9:82:C6:12:B5:1C:D2 X509v3 Authority Key Identifier: keyid:B7:78:5A:30:D8:51:2D:0D:8A:B6:37:81:2B:79:FA:45:29:A1:EF:1B X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3haMNhRLQ2KtjeBK3n6RSmh7xs.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/zXLnfUczUBBQtu-uo6mCxhK1HNI.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/54317d-094e-4820-9651-6219b32122d0/1/t3haMNhRLQ2KtjeBK3n6RSmh7xs.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.82.136.0/22 Signature Algorithm: sha256WithRSAEncryption 62:11:a3:c9:38:51:33:27:8d:2e:54:c0:98:ef:db:36:c1:a7: f6:85:63:3b:ce:de:68:b6:dc:2c:2d:f3:fb:49:49:34:87:18: 86:53:e2:e7:d4:44:30:81:6a:c0:28:4e:69:6e:d4:da:48:df: 39:3e:16:18:9e:ea:10:eb:64:13:db:8d:11:4a:28:0a:15:73: a8:55:83:97:46:b7:d2:6b:a3:36:14:1b:84:47:0a:57:80:b4: b8:7e:c6:28:4d:be:51:10:a6:18:d4:24:07:c9:26:f1:08:ec: bb:8d:1a:ce:61:3a:dc:64:f4:f3:ae:5f:37:49:f9:c0:29:28: cb:87:46:c9:7c:d6:a4:a0:21:95:0d:92:a3:4f:f5:64:78:00: 43:a4:c9:02:14:73:d9:15:09:91:ce:e4:2f:82:52:af:c4:a1: 67:40:38:e8:c4:14:83:bb:b7:92:a5:2c:36:1a:fb:b8:d2:95: 18:45:dd:8f:45:2e:8b:49:3a:6c:bf:ca:09:b4:35:23:5a:34: 5a:cf:b1:cf:8f:04:eb:8e:38:6c:de:cf:b4:72:04:38:ec:14: 1a:b7:c2:38:69:63:01:01:cb:25:a1:03:e5:78:4a:3c:6b:46: ec:54:21:66:ef:cb:93:10:29:bc:37:97:66:1d:d0:35:c6:00: ea:e6:49:16 -----BEGIN CERTIFICATE----- MIIE/TCCA+WgAwIBAgISAZt4NMA+QMV26J+V/apjqFJYMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGI3Nzg1YTMwZDg1MTJkMGQ4YWI2Mzc4MTJiNzlmYTQ1Mjlh MWVmMWIwHhcNMjYwMTAxMDYxODAxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EyhjZDcyZTc3ZDQ3MzM1MDEwNTBiNmVmYWVhM2E5ODJjNjEyYjUxY2QyMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Fr1Ozhx4n1xAo6nbz15cgrmFl9a X9cYtYmB83N0qrep4Zh4wHfv80cmUif3MWY9x1/5dYnJ/HZUyOuN6JYIz7karlVz aP+y44ttLXuK6KrjKbq2pNVXkSEPLHYN4SJLz8sZrH/fu1CbkOabaCtfq3N6frRJ pieVE6N8MzCq7OwCcOCo7lAZEq3AZg7Zh6vQWOtRBIIUHJ9qMG6dSQ0MyZfgzvzC GDY3xPJ74228Cs/qDGMT+vY3muT5pNe2/i85k7Xn6+J7N5C6Dv8l/lzD+I5F13ew Wm0XVJXD89nW9aU/7xG6p7UFF5NgVwQAQ9X+mKETzGjwj4ztzCizNq+uCwIDAQAB o4ICCTCCAgUwHQYDVR0OBBYEFM1y531HM1AQULbvrqOpgsYStRzSMB8GA1UdIwQY MBaAFLd4WjDYUS0NirY3gSt5+kUpoe8bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEt NjIxOWIzMjEyMmQwLzEvelhMbmZVY3pVQkJRdHUtdW82bUN4aEsxSE5JLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC9lNy81NDMxN2QtMDk0ZS00ODIwLTk2NTEtNjIxOWIzMjEyMmQw LzEvdDNoYU1OaFJMUTJLdGplQkszbjZSU21oN3hzLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLVKIMA0G CSqGSIb3DQEBCwUAA4IBAQBiEaPJOFEzJ40uVMCY79s2waf2hWM7zt5ottwsLfP7 SUk0hxiGU+Ln1EQwgWrAKE5pbtTaSN85PhYYnuoQ62QT240RSigKFXOoVYOXRrfS a6M2FBuERwpXgLS4fsYoTb5REKYY1CQHySbxCOy7jRrOYTrcZPTzrl83SfnAKSjL h0bJfNakoCGVDZKjT/VkeABDpMkCFHPZFQmRzuQvglKvxKFnQDjoxBSDu7eSpSw2 Gvu40pUYRd2PRS6LSTpsv8oJtDUjWjRaz7HPjwTrjjhs3s+0cgQ47BQat8I4aWMB AcsloQPleEo8a0bsVCFm78uTECm8N5dmHdA1xgDq5kkW -----END CERTIFICATE-----Generated at Mon Jan 26 05:39:25 2026 by rpki-client